Acer
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Connect M6E 5G Portable WiFi Router | 26 | – | Jun 4, 2026 |
| System Monitoring | 5 | – | Sep 17, 2026 |
| Predator Connect W6x | 5 | – | May 29, 2026 |
| Wave 7 router | 2 | – | May 29, 2026 |
| Agent Service | 2 | – | Sep 17, 2026 |
| NitrorSense V3 | 2 | – | May 28, 2026 |
| NitroSense V5 | 2 | – | Sep 23, 2026 |
| Aspire A315-22 | 1 | – | Nov 28, 2022 |
| Aspire A315-22G | 1 | – | Nov 28, 2022 |
| aspire c22-1600 | 1 | – | Aug 26, 2024 |
| aspire s 27 | 1 | – | Aug 26, 2024 |
| aspire s32-1856 | 1 | – | Aug 26, 2024 |
| aspire xc-1710 | 1 | – | Aug 26, 2024 |
| c24-1655 | 1 | – | Aug 26, 2024 |
| c24-962 | 1 | – | Aug 26, 2024 |
| Care Center | 1 | – | May 25, 2026 |
| altos r680 f4 | 1 | – | Aug 26, 2024 |
| ControlCenter | 1 | – | Jun 13, 2025 |
| ePowerSvc | 1 | – | Jan 16, 2026 |
| Extensa EX215-21 | 1 | – | Nov 28, 2022 |
| Extensa EX215-21G | 1 | – | Nov 28, 2022 |
| Global Registration Service | 1 | – | Jan 27, 2026 |
| ListCheck.exe | 1 | – | Dec 17, 2025 |
| vz2694g | 1 | – | Aug 26, 2024 |
| Acer Backup Manager Module | 1 | – | Jan 16, 2026 |
| Planet9 background service | 1 | – | Aug 17, 2026 |
| Planet9 desktop application | 1 | – | Aug 17, 2026 |
| Agent Serivce | 1 | – | Sep 17, 2026 |
| PredatorSense V3 | 1 | – | May 8, 2026 |
| Acer Updater Service | 1 | – | Jan 16, 2026 |
| altos r680s f4 | 1 | – | Aug 26, 2024 |
| Aspire A115-21 | 1 | – | Nov 28, 2022 |
Exploited and recent CVEs
- CVE-2026-50228 Electron DevTools Arbitrary Code Execution Vulnerability in NitroSense 0.2%
- CVE-2026-50227 MQTT WebSocket Command Execution Vulnerability in NitroSense 0.3%
- CVE-2026-50610 Improper Access control Vulnerability in NitroSense and PredatorSense Software 0.1%
- CVE-2026-50609 Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software 0.1%
- CVE-2026-50608 Authentication Vulnerability in NitroSense and PredatorSense Software 0.2%
- CVE-2026-50607 WebSocket Exposure Vulnerability in NitroSense and PredatorSense Software 0.4%
- CVE-2026-50606 Hard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software <0.1%
- CVE-2026-50605 Privilege Escalation Vulnerability in NitroSense and PredatorSense Software 0.1%
- CVE-2026-50604 Unauthenticated Access Vulnerability in NitroSense and PredatorSense Software 0.2%
- CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense <0.1%
- CVE-2026-50602 Planet9 Incorrect Permission Assignment Vulnerability Information 0.1%
- CVE-2026-50601 Planet9 Hardcoded Credentials Vulnerability Information 0.4%
- CVE-2026-50226 Firmware Theft & IMEI Spoofing via Connect-OTA 0.2%
- CVE-2026-50225 Account Creation Exhaustion 0.2%
- CVE-2026-50224 Unauthenticated IPv6 WAN Management Exposure 0.2%
- CVE-2026-50214 Shared Secret Quota Inflation 0.2%
- CVE-2026-50213 Bulk User Private Data Harvesting 0.2%
- CVE-2026-50212 Arbitrary Remote Device Unbinding 0.2%
- CVE-2026-50211 Exposed Factory Testing App Boundaries 0.3%
- CVE-2026-50210 Weak Static Cryptographic Initialization Vectors 0.2%
- CVE-2026-50209 MDM Server Registration Overriding <0.1%
- CVE-2026-50208 Permissive TrustAllCerts TLS Verification 0.1%
- CVE-2026-50207 Local Modem Manipulation via Binder Interfaces 0.1%
- CVE-2026-50206 VPN Command Injection Vulnerability 0.7%
- CVE-2026-50205 Plaintext Log Credential Leakage 0.2%
- CVE-2026-49204 Hard-coded AWS Cognito Testing Accounts 0.2%
- CVE-2026-49202 Unverified Meeting Recording Endpoints & Permissive CORS 0.3%
- CVE-2026-49203 Unauthenticated eSIM Configuration Manipulation 0.2%
- CVE-2026-49194 SCREEN_CLICK Authentication Bypass 0.2%
- CVE-2026-49193 Publicly Readable AWS S3 Telemetry Buckets 0.2%